This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/D2jWcFAbhURMeTxTjEIByipr4m0.roa File: D2jWcFAbhURMeTxTjEIByipr4m0.roa (raw, json) Hash identifier: an3ZFw2nMugcjxJwPTHhcCjAlUDycKVSEdUyiZEtoFo= Subject key identifier: 0F:68:D6:70:50:1B:85:44:4C:79:3C:53:8C:42:01:CA:2A:6B:E2:6D Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Certificate serial: 019B1D1F9D4679B9206539C4D5FCE92D99C4 Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/D2jWcFAbhURMeTxTjEIByipr4m0.roa Signing time: Sun 14 Dec 2025 13:49:29 +0000 ROA not before: Sun 14 Dec 2025 13:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51847 IP address blocks: 2a14:67c1:a040::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:1f:9d:46:79:b9:20:65:39:c4:d5:fc:e9:2d:99:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0 Validity Not Before: Dec 14 13:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0f68d670501b85444c793c538c4201ca2a6be26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:7c:dd:23:19:24:93:33:6e:e4:72:17:73: 7e:eb:b3:1f:3f:20:c4:02:74:eb:1a:45:cb:45:4d: 21:55:7a:51:c1:0b:5d:58:6a:6d:54:12:ad:b8:1b: 40:17:02:31:b3:61:c9:f4:17:8b:b0:a0:7f:a0:4d: fe:bf:a0:24:fd:a7:de:56:31:7e:4a:8d:96:7d:63: 01:0d:86:86:48:f6:5e:36:36:bd:2e:50:96:7e:c1: 78:58:ec:85:d8:1a:9c:b6:00:68:b2:f8:7f:8e:e7: dc:32:1e:9c:64:a8:e0:11:40:22:9b:ab:ab:6d:a3: 66:e9:f4:c5:92:f0:7b:7b:48:c4:6f:99:f2:7e:f8: 61:64:a5:d2:f1:fe:07:82:cc:4f:15:dd:3f:c8:a3: 51:4e:83:eb:61:7f:8e:b3:ba:3d:ba:93:c0:13:34: 41:7f:9e:f8:b0:5a:f5:87:9a:35:96:5c:da:ab:5d: 03:4a:98:d6:90:85:c1:29:db:ce:06:e2:53:e4:f8: 07:4e:be:de:a0:98:af:32:7f:7f:26:f3:2d:cf:c8: 4f:bf:aa:54:4f:02:81:fe:c0:8f:73:2a:b9:28:48: 72:8d:8f:51:6c:75:3c:91:07:1a:56:26:ee:90:12: f7:51:22:be:7c:13:1a:70:a2:1a:e7:5c:9c:b6:d7: 9e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:68:D6:70:50:1B:85:44:4C:79:3C:53:8C:42:01:CA:2A:6B:E2:6D X509v3 Authority Key Identifier: keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/D2jWcFAbhURMeTxTjEIByipr4m0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:67c1:a040::/44 Signature Algorithm: sha256WithRSAEncryption 93:9c:cb:c3:3b:d9:99:81:28:42:44:4b:ec:61:65:7c:84:b7: 87:9a:27:00:1c:69:9d:39:fd:09:fc:b8:42:dd:a7:5d:b8:77: 5d:3b:f9:84:73:fa:d0:c6:84:60:09:8e:4a:c4:18:d3:0c:8b: 52:b1:37:e1:06:8e:13:53:d7:45:64:fa:57:ca:44:f4:d7:87: 9a:06:57:fd:eb:5a:14:04:ff:1f:a3:74:50:18:4f:ae:d4:1c: 9d:15:41:03:37:c9:21:00:0b:ac:88:e4:dc:20:b9:64:20:e6: 5b:87:bb:78:b3:29:b4:9d:2b:0b:71:f4:3a:22:dd:e5:d8:80: 6c:0e:0e:c5:04:95:1f:09:0f:47:6c:d0:33:ac:9f:3f:a3:43: 10:3b:23:a7:13:d8:74:eb:a9:4e:83:10:71:47:a8:87:4e:eb: 54:e6:5b:33:76:26:de:1b:cf:ef:0e:87:0a:3b:c0:21:42:1f: 57:65:c8:01:54:46:d3:a7:4d:be:e0:af:1d:45:e2:4a:93:03: 0d:e6:96:5d:4f:b0:c9:73:c1:44:6e:93:e7:9c:0d:e0:22:56: 5e:1b:59:d7:a0:0b:a8:30:a2:b3:83:20:43:ce:d0:bf:fe:fd: 5d:f4:a6:a8:03:6d:7b:cc:a5:7c:ab:78:43:37:5d:e6:21:62: 43:ad:65:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZsdH51GebkgZTnE1fzpLZnEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjMxYmRlNDY1MTYzNDdmNGVkZmNiZTMwZWRhYzlhMDll NGUwZTAwHhcNMjUxMjE0MTM0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjY4ZDY3MDUwMWI4NTQ0NGM3OTNjNTM4YzQyMDFjYTJhNmJlMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMd83SMZJJMzbuRyF3N+67MfPyDE AnTrGkXLRU0hVXpRwQtdWGptVBKtuBtAFwIxs2HJ9BeLsKB/oE3+v6Ak/afeVjF+ So2WfWMBDYaGSPZeNja9LlCWfsF4WOyF2BqctgBosvh/jufcMh6cZKjgEUAim6ur baNm6fTFkvB7e0jEb5nyfvhhZKXS8f4HgsxPFd0/yKNRToPrYX+Os7o9upPAEzRB f574sFr1h5o1llzaq10DSpjWkIXBKdvOBuJT5PgHTr7eoJivMn9/JvMtz8hPv6pU TwKB/sCPcyq5KEhyjY9RbHU8kQcaVibukBL3USK+fBMacKIa51yctteepQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFA9o1nBQG4VETHk8U4xCAcoqa+JtMB8GA1UdIwQY MBaAFGfzG95GUWNH9O38vjDtrJoJ5ODgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYt ZjZjYzRlZjBmN2RmLzEvRDJqV2NGQWJoVVJNZVR4VGpFSUJ5aXByNG0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83MzJiNmMtNDhlNC00MzUwLThhNTYtZjZjYzRlZjBmN2Rm LzEvWl9NYjNrWlJZMGYwN2Z5LU1PMnNtZ25rNE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhRnwaBA MA0GCSqGSIb3DQEBCwUAA4IBAQCTnMvDO9mZgShCREvsYWV8hLeHmicAHGmdOf0J /LhC3adduHddO/mEc/rQxoRgCY5KxBjTDItSsTfhBo4TU9dFZPpXykT014eaBlf9 61oUBP8fo3RQGE+u1BydFUEDN8khAAusiOTcILlkIOZbh7t4sym0nSsLcfQ6It3l 2IBsDg7FBJUfCQ9HbNAzrJ8/o0MQOyOnE9h066lOgxBxR6iHTutU5lszdibeG8/v DocKO8AhQh9XZcgBVEbTp02+4K8dReJKkwMN5pZdT7DJc8FEbpPnnA3gIlZeG1nX oAuoMKKzgyBDztC//v1d9KaoA217zKV8q3hDN13mIWJDrWWR -----END CERTIFICATE-----Generated at Thu Dec 18 09:21:39 2025 by rpki-client